Embed server
Goauld client embedded server mode
The client can enter server mode, allowing it to emulate a listening server (similar to nc -lvp).
Quick usage
tealc embed-server
Note
The deployed agent must have an appropriate age public key (embedded at compile-time or provided at runtime).
Note
The agent automatically kills itself after the shell session ends
Options
--age-privkey: age private key for the embedded server.tealcrequires this key to be provided via one of these methods:--age-privkeyflag- Configuration file entry
- Environment variable
- Compile-time embedding via
CLIENT__AGE_PRIVKEY(see Compile agent)
--http-listen-addr,--https-listen-addr,--dns-listen-addr,--quic-listen-addr: override the listen addresses for the embedded server’s respective services, matching their Listening services counterparts.
Note
--ssh-listen-addr exists as a flag but has no effect here: tealc embed-server never binds a raw SSH TCP listener. The connecting agent reaches sshd in-process regardless of transport, and the operator’s own SSH connection is always routed through the embedded server’s /ssh-ws/ WebSocket endpoint instead of a -p<port> TCP dial (see Connecting over WebSocket in client/SSH).